Skip to content

v1.18.1 — Security hardening (relay rate limiting + Umbrel proxy auth)

Choose a tag to compare

@465media 465media released this 02 Jul 17:40
· 52 commits to main since this release

Maintenance release — no feature changes.

Security hardening:

  • Relay login rate limitingrelay.bitaxeballer.com/login now throttles repeated attempts per client (10/min), protecting both the relay and the license server from brute-force sprays. Tunable via RELAY_LOGIN_RATE_MAX / RELAY_LOGIN_RATE_WINDOW_S for self-hosted relays.
  • Umbrel: dashboard now behind Umbrel's login — the app tile URL requires your Umbrel password (PROXY_AUTH_ADD enabled). Direct LAN access on port 13701 still works for local convenience. Umbrel users should update to pick this up.

Desktop apps are unchanged apart from the version number — updating is optional on Mac/Windows.